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IN THE CLAIMS 

This listing of claims replaces all prior versions and listings of claims in the application. 
Listing of Claims 

1. (Currently Amended) An apparatus for protecting a computer system, 
comprising: 

a password controller coupled to said gie computer system, said password 
controller capabl e of neG e iv i ng toeing adapted to receive a password attempt transmitted 
from a user device over a network, and ea pab te of op e rating being adaoted to operate a 
computer program to compare sai4 itje password attempt with a stored password, vrtierein 
said !be stored password comprises a password segment^ and said ttie passvrard segment 
comprises: 

an entry event comprising [{aj] at least one predet^rnined entry signal; 

a predetermined time interval following «aid the entry event; arxl 

a terminating signal follavwng said the predetermined time interval, said 

terminating signal meriting the end of said the password segment; 

wherein s aid computer program i s capabl e of al l owing the password controller 

allows the user device to access te-said ttie computer system when the computer proofam 

determines that a password segment of said the password attempt matches said tt}g 

password segment of said the stored password. 

2. (Currently Amended) The apparatus as set forth In Claim 1, wherein said 
computer program io capab lo of comp a ring compares a time envelope of said the stored 
password with a time envelope of a received password attempt, and capable of deny i ng 
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denies access to said the computer system when said the time envelope of said the 
received password attempt does not match said t^g time envelope of said thie stored 
password. 

3. (Currently Amended) The apparatus as set forth in Claim 1 wherein said 
computer program compares said the stored password with said tiie password attempt 
received from an online connection to determine whether said the password attempt from 
said the online connection matches eaid tiie stored password. 

4. (Original) The apparatus as set forth in Claim 1 wherein said entry event 
comprises a predetermined combination of computer readable entry ^gnals, wherein each 
computer readable entry signal comprises one of: a character, a symbol, and a numt)er. 

5. (Currently Amended) The apparatus as set forth in Claim 1 wherein said 
terminating signal is an entry event that follows said the predetermined time interval. 

6. (Currently Amwided) The apparatus as set forth in Claim 3 wherein said 
computer program is capable of sending a signal to said the online connection that 
indicates whether eaid tt^ password attempt received from eaid tbg online connection 
matches said the stored password. 

7. (Currently Amended) The apparatus as set forth in Claim 6 v^erein said 
computer program is capable of waiting until a time delay period expires before sending 
said the signal that indicates whether said the password attempt received from said 
online connection matches said the stored password. 
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8. (Original) The apparatus as set forth in Claim 7 wherein said time delay 
period is of variable duration. 

9. (Currently Amended) The apparatus as set forth in Claim 1 wherein said 
stored password comprises at least one password segment comprising a predetermined 
time interval calculated by subtracting from the total time measured from the trailing edge 
of a first entry event to the trailing edge of a next second entry event the time required to 
read said the next second entry event. 

10. (Currently Amended) The apparatus as set forth in Claim 2 wherein said 
stored password further comprises a plurality of password segments wherein the total time 
of said the plural ity of password segments equals said ttie time envelope of eaid the stored 
password, within a predetermined deviation. 

11. (Currently Amended) An apparatus for protectir>g a computer system, 
comprising: 

a password controller coupled to said ttje cc^puter system, said password 
controller oapab l oof comprising: 

means for receiving over a network, a password attempt g enerated bv a user 
device: and 

e a p a b le ef op e rat i ng a computer program to compare for comparing a time envelope 
of [[a]] the received password attempt with a time envelope of a stored password, and 
ea p a b l e of foe denying access to said tJie computer system bvthe user device when said 
the time envelope of said tine received password attempt does not match said ttie time 
envelope of said the stored password. 
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12. (Currently Amended) A method of protecting [[an]] a computer system, 
comprising the steps of: 

detecting an initial entry event of a password attempt sent over a network by a user 
device : 

determining whether a password segment of said the password attempt matches a 
password segment of a stored password^, >Miereln said the password segment comprises: 
an entry event comprising a predetermined entry signal; 
a predetermined time Interval following eaid the entry event; and 
a terminating signal following eaid the predetermined time interval, said 
terminating signal marking the end of eaid the password segment; and 

allowing the user device to access to s a i d the computer system when said the 
password segment of said the password attempt matches said the password segment of 
said the stored password. 

1 3. (Currently Amended) The method as set forth in Claim 1 2 further comprising 
the steps of: 

calculating a time interval of said the password segment of said the password 
attempt by subtracting the time required to read a next second entry event from the total 
time measured from the trailing edge of a first entry event to the trailing edge of said the 
next second entry event; and 

determining whether said the time interval of said the password segment of said ttie 
password attempt matches a time interval of said lbs password segment of said the stored 
password. 

1 4. (Currently Amended) The method as set forth in Claim 1 3 further comprising 
the steps of: 
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waiting for a time delay period to expire after determining whether said the 
password attempt matches eeM the stored password; and 

sending a signal that indicates whether said the password attempt matches said the 
stored password. 

1 5. (Original) The method as set forth in Claim 1 4 wherein said time delay period 
IS of variable duration. 

1 6. (Currently Amended) The method as set forth in Claim 1 3 further comprising 
th e st e p of: detemiining whether said the entry event of each said password segment of 
said the password attempt matches a corresponding entry event of said the password 
segment of said gie stored password. 

1 7. (Curentfy Amended) The method as set forth in Claim 1 3 further corr^Jrising 
th e st e p of: determining whether said tl^e time interval of said the password segment of 
said tlie password attempt matches a corresponding time interval of each said password 
segment of said thg stored password. 

1 8. (Cun^ntly Amended) The method as set forth in Claim 1 2 fijrther comprising 
th e - st e p of j comparing each entry signal in said the entry event in said the password 
segment of said the password attempt with a corresponding entry signal in said ttie entry 
event of said the password segment of said the stored password. 

1 9. (Currently Amended) The method as set fortti in Claim 12 further comprising 
the step Sjteps of: 

beginning the timing of said the password segment of said ttie password attempt at 
the trailing edge of one of a first entry event and first entry signal; and 
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concluding the timing of eaid the password segment of saidttje pass\word attempt at 
me trailing edge of or>e of a next secx>nd entry event and next second entry signal. 

20-21. (Canceled) 

22, (Currently Amended) For use in a computer, computer executable process 
steps stored on a computer readable storage medium capable of protecting esM ttie 
computer, comprising the steps of: 

detecting an initial entry event of a password attempt sent over a network bv a user 
device: 

determinirig whether a password segment of said the password attempt matches a 
password segment of a stored password^ wherein said the password segment comprises: 
an entry ev^ comprising a predetermined entry signal; 
a predetermined time interval following said the entry event; and 
a terminating signal following ©aid the predetermined time interval, said 
terminating signal marking the end of said jatje password segment; and 

allowing the user device to access to said the computer system when said tbfi 
password segment of aaid the password attempt matches said tiie password segment of 
said i|ie stored password. 

23. (Currently Amended) The computer executable process steps stored on a 
computer rBadable storage medium, as set forth in Claim 22, further comprising the steps 

of: 

calculating a time interval of eaid the password segment of said flie password 
attempt by subtracting the time required to read a next second entry event from the total 
time measured from the trailing edge of a first entry event to the trailing edge of saidthg 
next second entry event; and 
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determining whether sal^ the time interval of 6ai4 the password segment of said the 
password attempt matches a time interval oFsaidtbS password segment of said the stored 
password. 

24. (Currently Amended) The computer executable process steps stored on a 
computer readable storage medium, as set forth in claim 22, further comprising the steps 
of" 

waiting for a time delay period to expire after determining whether said the 
password attempt matches saW tjie stored password; and 

sending a signal that indicates whether said the password attempt matches said ihe 
stored password. 

25. (Currently Amended) The computer executable process steps stored on a 
computer readable storage medium, as set forth in Claim 22, further comprising the^step 
efr waiting an arbitrary and variable time delay period before sending satd the signal that 
indicates whetlier said the password attempt eignal s matches said the stored password. 

26. (Currently Amended) The computer executable process steps stored on a 
computer readable storage medium, as set forth in Claim 22^ further comprisir^g th e st e p 

determining whether said the entry event of each said password segment of said the 
password attempt matches a corresponding entry event of said tte password segment of 
said the stored password. 

27. (Currently Amended) The computer executable process steps stored on a 
computer readable storage medium, as set forth in Claim 22^ further comprising th e st e p 
Qfr determining whether said the time interval of said the password segment of said the 
password attempt matches a corresponding time interval of each said password segment 
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of said the stored password. 

28. (Currently Amended) The computer executable process steps stored on a 
computer readable storage medium, as set forth in Claim [[21 ]] 22^ further comprising 4h© 
s t e p off: comparing each entiy signal in ©aid Hie entry event in saidttiS password segment 
of said ttie password attempt with a corresponding entry signal in said the entry event of 
said the password segment of said tiie stored password. 

29. (Currently Amended) The computer executable process steps stored on a 
computer readable storage medium, as set forth in claim 22^ further comprising the step 
steps of: 

beginning the timing of said the password segment of said ibe password attempt at 
the trailing edge of one of a first entry event and first entry signal; and 

concluding the timing of said the password segment of said tf^ password attempt at 
the trailing edge of one of a next second entry event and next second entry signal. 

30. (Currently Amended) A method of authenticating a user device, said method 
comprising the steps of; 

receiving by an authentication device, a password sent from me user device inji 
single data burst transmitted after the user enters the comple te password, said password 
comprising a sequence of predefined characters, wherein the user devic e separates each 
of said flie characters b ei ng s e p a rat e d by a predefined time interval from an adjacent 
character in the sequence; 

determining by the authentication device, whether the received characters match 
the predefined characters; 

determining by the authentication device, whether the received time interval 
between the received characters matches the predefined time interval; and 
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positively authenticating the user device only if the received characters matdi the 
predefined characters, and the received time interval between the received characters 
matches the predefined time interval, 

31 . (Previously Presented) The method of claim 30, wherein the predefined time 
interval between a first pair of characters is different than the predefined time Interval 
between a second pair of characters. 

32. (Previously Presented) The method of claim 30, wherein the step of 
determining whether the received time interval between the received characters matches 
the predefined time interval includes: 

measuring the time interval t>etween the received characters; and 
determining whether the measured time interval is within a predefined positive or 
negative tolerance value of the predefined time interval. 

33. (Previously Presented) The method of claim 30, further cx3mprising\A^iting for 
an arbitrary time period after ttie authenticating step is complete before serKling an 
authorization message from the authentication device to the user device- 

34. (Currently Amended) The method of claim 30, further comorisina . prior to 
receivlno the password from the user device, the step of sending information regarding the 
predefined time interval from the authentication device to the user device. 

35. (Previously Presented) The method of claim 34, wherein the authentication 
device periodically sends a new time interval to the user device. 

36. (Currently Amended) The method of claim 30, wherein frie user device [[is]J 
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includes a magnetic card reader, and the authentication device is a server in a financial 
authorization network 

37. (Cun^ently Amended) The method of claim 30, wherein the user device [[Is]] 
Includes a magnetic card reader, and the autherrtication device is [[a]] connected to a 
server in a financial authorization network. 

38. (Currently Amended) In a user device, a method of constructing and 
transmitting a password utilized by an authentication device to authenticate the user 
device, said method comprising the steps of. 

form i ng receiving from a user a sequence of predefined characters forming a 
password: aod 

soporoting oaoh of oa i d ch a ract e r s from a n adjac e nt charact e r in th e s e quenc e by a 
pr e d e fin e d t i m e i nt e rv al ; 

identifying a predefined time interval for separating each character from an adjacent 
character in the sequence: and 

transmitting the password to the authentication device with each character being 
separated from the adjacent character in the sequence bv the predefined time interval 

39. (Currently Amended) The method of claim 38, wherein the form i ng stop 
password includes forming a s s qu e no e of at least three characters, and wherein the step 
of identifving a predefined time interval Includes identifving a first predefined time interval 
between a first pair of characters i s differ e nt than th e and a different second predefined 
time Interval between a second pair of characters. 

40. (New) TTie method of claim 38, wherein the step of identifying a predefined 
time interval includes receiving the predefined time interval from the authentication device. 
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41 . (New) The method of claim 1 , wherein the entry event comprises a plurality 
of sequential entry signals forming a data block, and the time interval follows the data 
block. 
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